search

advplyr / audiobookshelf

Self-hosted audiobook and podcast server
https://audiobookshelf.org
GNU General Public License v3.0
5.75k stars 395 forks source link

[Bug]: Skyhigh Remote Browser Isolation Flagging AudioBookShelf as Malicious #3114

Open Jdiesel87 opened 4 days ago

Jdiesel87 commented 4 days ago

What happened?

This is probably a bit of an edge case but my organization utilizes a security product called Skyhigh Remote Browser Isolation which will open websites deemed to be malicious in sandbox environment.

https://www.skyhighsecurity.com/platform/remote-browser-isolation.html

AudioBookShelf is being flagged for some reason

What did you expect to happen?

All my services are hosted through an nginx reverse proxy with letsencyrpt certificates. All other services (Emby, Kavita, Overseer, etc) are accessible through my work network with the exception of audiobookshelf which is being flagged. I don't believe it is a ssl certificate issues because all other services work fine.

Steps to reproduce the issue

  1. This is going to be tough to reproduce unless you have access to the Skyhigh software. Just wanted to file a bug for visibility or in the event someone has a solution. It may be the a case needs to be submitted with Skyhigh to have audiobookshelf whitelisted.

Audiobookshelf version

2.10.1

How are you running audiobookshelf?

Docker

What OS is your Audiobookshelf server hosted from?

Linux

If the issue is being seen in the UI, what browsers are you seeing the problem on?

None

Logs

No response

Additional Notes

No response

DieselTech commented 4 days ago

The way to resolve problems like this is to report the URL to the security product as a false positive. From looking at the vendor's site there is a very wide array of customization they can filter based on. Your workplace gets to pick the rules they want to use to try and block sites that might cause harm.

advplyr commented 4 days ago

Is there no reason given as to why it is getting flagged?

Jdiesel87 commented 4 days ago

Is there no reason given as to why it is getting flagged?

I unfortunately don't have access to the dashboard that might have that type of information. I may try submitting a self positive to the as mentioned above. Is there a public audiobookshelf demo site that I can access to verify that it isn't a issue with my environment?